Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-2097
HistoryMar 02, 2014 - 12:00 a.m.

CVE-2014-2097

2014-03-0200:00:00
ubuntu.com
ubuntu.com
7

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

69.4%

The tak_decode_frame function in libavcodec/takdec.c in FFmpeg before 2.1.4
does not properly validate a certain bits-per-sample value, which allows
remote attackers to cause a denial of service (out-of-bounds array access)
or possibly have unspecified other impact via crafted TAK (aka Tom’s
lossless Audio Kompressor) data.

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

69.4%